Usable with caveats: the package is licensed, documented, non-deprecated, and backed by an organization-owned repository. However, it has had no release or commit activity since February 2023, so ongoing maintenance and compatibility support are uncertain.
58%
Total Score
75
50
88
75
The package has 10 runtime dependencies, all aligned with the Ride framework or its Flare client, which is coherent for an exception-reporting integration. The relatively broad dependency surface still increases compatibility maintenance requirements.
The package has five releases, but none in the last 12 months and the latest release was published on February 23, 2023. This long release gap is a meaningful maintenance concern despite a previously regular median interval of about 45 days.
The repository recorded zero commits and zero active maintainers during the last three months. Combined with the old latest release, this indicates substantially reduced maintenance capacity.
The repository uses Composer, appropriate for this PHP package, but has no security scanning tools. That is a transparency and maintenance gap, though it is not by itself evidence that the package is unsafe.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This lowers transparency for a package that handles exception data and integrates with an external reporting service.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ride/app Version ^1.0.0 | — | — |
ride/web Version ^1.0.0 | — | — |
ride/lib-log Version ^1.0.0 | — | — |
ride/lib-http Version ^1.0.0 | — | — |
ride/web-base Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.